https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
google-cloud
  • d

    dazzling-family-13566

    10/26/2021, 4:47 PM
    It doesn’t happen every time … not sure (yet) which version introduced this but started to seeing these error recently. Currently on v3.16.0
  • a

    able-camera-57198

    11/02/2021, 7:10 PM
    Anyone happen to know what the equivalent service is in Pulumi google native for Terraform's
    google_service_networking_connection
    ?
  • b

    billions-ambulance-7516

    11/03/2021, 1:17 AM
    hey all, has any one got cert-manager working in a GKE? been trying to use @pulumi/kubernetes-cert-manager but haven't been able to figure it out
    p
    • 2
    • 2
  • a

    alert-planet-55552

    11/05/2021, 10:05 AM
    Hello folks, we are moving from a functioning project using the GCP Classic provider to the Google-Native provider. We are struggling to get impersonation working. We are using Go and the same style of configuration as for the classic provider:
    gcp:impersonateServiceAccount: <mailto:res-admin@REDACTED-PROJECT.iam.gserviceaccount.com|res-admin@REDACTED-PROJECT.iam.gserviceaccount.com>
      google-native:impersonateServiceAccount: <mailto:res-admin@REDACTED-PROJECT.iam.gserviceaccount.com|res-admin@REDACTED-PROJECT.iam.gserviceaccount.com>
    but it is unable to retrieve the access token:
    error: Native: rpc error: code = Unknown desc = invocation of google-native:cloudresourcemanager/v3:getFolder returned an error: error sending request: impersonate: unable to generate access token: Post "https:// <http://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/res-admin@REDACTED-PROJECT.iam.gserviceaccount.com:generateAccessToken|iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/res-admin@REDACTED-PROJECT.iam.gserviceaccount.com:generateAccessToken>": context canceled
    
    # debug log shows it's a reset but this is not a networking issue because it is repeatable (and works via gcloud)
    ... eventsink.go:86] eventSink::Error(<{%reset%}>
    However, this works with the Classic provider and also using gcloud:
    ❯ gcloud resource-manager folders describe 163783803528 --impersonate-service-account=res-admin@REDACTED-PROJECT.iam.gserviceaccount.com
    
    WARNING: This command is using service account impersonation. All API calls will be executed as [res-admin@REDACTED-PROJECT.iam.gserviceaccount.com].
    WARNING: This command is using service account impersonation. All API calls will be executed as [res-admin@REDACTED-PROJECT.iam.gserviceaccount.com].
    createTime: '2021-06-16T13:59:02.491Z'
    ...
    Minimal Go code attached. Any ideas as to what's going wrong?
    t
    • 2
    • 3
  • f

    fresh-processor-9973

    11/05/2021, 12:19 PM
    Hi all 👋 I've made a small component module for Python to cap GCP billing costs via Billing Alerts, Pub/Sub & Cloud Functions, maybe this will be useful to some (I couldn't find any existing pulumified guides around this). GitHub: https://github.com/saiko-tech/gcp-billing-cap Ideas & suggestions are very welcome, it's a pretty crude implementation and I'm not super familiar with Pulumi best-practices 😅 PS: I would have liked to publish it as a proper Pulumi package so it's usable from all languages, but I gave up rather quickly as the process seems quite complicated and publishing to the pulumi registry isn't publicly accessible yet.
  • f

    fresh-processor-9973

    11/05/2021, 12:19 PM
    Hope this is useful to someone 🙂
  • a

    able-camera-57198

    11/05/2021, 1:22 PM
    var computeService = new Service(
                "compute",
                options: new() {
                    Parent = this,
                },
                args: new ServiceArgs
                {
                    ServiceName = "<http://compute.googleapis.com|compute.googleapis.com>",
                }
            );
    
            var defaultNetwork = Output.Create(GetNetwork.InvokeAsync(new()
            {
                Network = "default",
            }));
    Is there any way for me to have the call to
    GetNetwork
    depend on
    computeService
    ? Right now GCP is giving me an error because I'm trying to call
    GetNetwork
    prior to the API for it being enabled...
    p
    • 2
    • 143
  • f

    fast-arm-63150

    11/08/2021, 10:02 PM
    @prehistoric-activity-61023 just continuing off the last thread - I am, too, having issues with first activating/enabling services using the python automation SDK
    p
    • 2
    • 10
  • f

    fast-arm-63150

    11/08/2021, 10:02 PM
    essentially GCP complains that the "X service isn't started as yet" especially when spinning up a new stack
  • p

    plain-potato-84679

    11/09/2021, 8:56 AM
    Hi! When deploying a docker container on a compute engine instance via Pulumi, how would you persist state? If I update the docker container version via Pulumi, this would create a new compute engine instance I believe? Thanks a lot!
  • e

    eager-pillow-75917

    11/09/2021, 11:04 AM
    trying to clone a db with pulumi
  • e

    eager-pillow-75917

    11/09/2021, 11:04 AM
    https://www.pulumi.com/registry/packages/gcp/api-docs/sql/databaseinstance/#look-up
  • e

    eager-pillow-75917

    11/09/2021, 11:04 AM
    what does this look like?
    id This property is required. - The unique provider ID of the resource to lookup.
  • e

    eager-pillow-75917

    11/09/2021, 11:28 AM
    anyone?
  • e

    eager-pillow-75917

    11/09/2021, 11:29 AM
    I am running this basically…
    export const geodudeTestInstance = gcp.sql.DatabaseInstance.get(<NAME>, <ID>, ...);
  • e

    eager-pillow-75917

    11/09/2021, 11:29 AM
    and getting this error
    error: Preview failed: resource '<ID>' does not exist
    f
    • 2
    • 1
  • v

    victorious-tiger-25684

    11/10/2021, 7:48 PM
    Hi! I think the docs should reference ClusterNodeConfigWorkloadMetadataConfigArgs instead of ClusterNodeConfigWorkloadMetadataConfig at https://www.pulumi.com/registry/packages/gcp/api-docs/container/cluster/#workloadmetadataconfig_go. Does that make sense? I'm not sure how the docs are generated, but I'd be happy to try and fix this.
  • b

    brief-xylophone-82066

    11/10/2021, 11:23 PM
    Out of curiosity, has anyone set up shared VPC using the Google Native provider? I know I can probably get it done quickly with the classic provider via
    compute/SharedVpc{Host,Service}Project
    , but I’m trying to get as far as I can with the native provider since the docs recommend using it for new projects. If the answer is that it doesn’t really exist yet that’s fine, I’m just trying to confirm that I’m not simply missing it in the API docs anywhere.
  • s

    square-lunch-33033

    11/15/2021, 4:26 PM
    I am new to GCP, and I am seeing this weird thing. I have set up a local service account and set it up on my machine with
    gcloud auth activate-service-account…
    I looked at my config, and auth stuffs, but pulumi is still trying to run under an old and different GCP service account it seems:
    * googleapi: Error 403: [account name]@appspot.gserviceaccount.com does not have storage.buckets.create access to the Google Cloud project., forbidden
    p
    b
    • 3
    • 11
  • t

    tall-photographer-1935

    11/16/2021, 3:26 PM
    In the GCP Native Provider, how do we create a
    RouterNat
    type? I've tried
    compute.Router.RouterNat
    to no avail..https://www.pulumi.com/registry/packages/google-native/api-docs/compute/v1/router/#routernat
  • b

    best-summer-38252

    11/17/2021, 6:50 AM
    Hi, anyone know how to activate a service API for an existing Project? ie
    gcloud services enable my-consumed-service
    but with the google-native provider?
    p
    t
    • 3
    • 7
  • e

    eager-thailand-33661

    11/18/2021, 11:44 AM
    Hi, I thought the new GCP Native provider would be "always up-to-date"? However, there's an API for Data Pipelines that was released some time ago, but it doesn't seem to be picked up by the provider. https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/ Have I missed it or is perhaps not "always up-to-date"?
    t
    l
    g
    • 4
    • 13
  • f

    fast-easter-23401

    11/19/2021, 8:32 PM
    Hello everybody, My team and I are migrating our infrastructure from terraform. I wish to retrieve the state of our k8s cluster using the
    import
    arg from the
    CustomResourceOptions
    interface (we're using ts). In order to do so, I need to retrieve the cluster ID, which I got already, but for some reason the
    google-native
    complains that the resource doesn't exist. The classic api works like a charm using the
    $PROJECT_ID/$LOCATION/$CLUSTER_NAME
    naming convention for IDs. My tech-lead, though, suggests that we should use the
    google-native
    api instead. So my question is: do you guys know what the API expects to receive to identify the resource by its ID? So far I tried the following possibilities: • v1/projects/$PROJECT_ID/locations/$LOCATION/clusters/$CLUSTER_NAME • projects/$PROJECT_ID/locations/$LOCATION/clusters/$CLUSTER_NAME • $PROJECT_ID/$LOCATION/$CLUSTER_NAME Thank you so much for your time. I wish y'all a nice day.
    g
    • 2
    • 2
  • f

    fancy-caravan-31881

    11/23/2021, 5:01 PM
    Hi! I’m trying to create a GKE Autopilot cluster using the google-native library, however I’m running into some trouble trying to define the node config for it and the documentation isn’t very clear to me. In GCP (Classic), it would be something like:
    const cluster = new gcp.container.Cluster("mygke", {
    ...
    ...
      enableAutopilot: true,
      initialNodeCount: 1,
      nodeConfig: {
        machineType: "n2d-standard-2",
        oauthScopes: [
          ...
        ],
      },
    ...
    ...
    });
    But I can’t define a
    nodeConfig
    in the new google-native library and the
    nodePools
    in not very clear to me because and still mentions
    nodeConfig
    and
    initialNodeCount
    which are no longer input properties anymore: https://www.pulumi.com/registry/packages/google-native/api-docs/container/v1/cluster/#nodepools_nodejs Does anyone here have any experience with GKE Autopilot and new google-native library? EDIT: as it stands, I can create a Autopilot cluster with no nodes
    g
    • 2
    • 4
  • a

    able-camera-57198

    11/23/2021, 10:56 PM
    When I'm using the google cloud storage driver to manage my state, Pulumi is giving me the following error on my CI machine:
    You do not appear to have access to project
    I'm using a service account (have been able to access other buckets with it) on my CI machine, so I know it definitely has permission to work with resources inside of the project. For some reason though, Pulumi thinks it doesn't... Any possible causes for this error? Is there a list of permissions the Pulumi GCP driver expects to have?
    g
    • 2
    • 4
  • f

    fancy-caravan-31881

    11/24/2021, 4:53 PM
    I’ve looked around the new google-native library (v0.9.0 was released today!) but I don’t see an equivalent of the servicenetworking api (https://www.pulumi.com/registry/packages/gcp/api-docs/servicenetworking/connection/). Is that correct or am I just not seeing it? 😑
    f
    • 2
    • 2
  • f

    fast-easter-23401

    11/24/2021, 7:26 PM
    Hi, I've been struggling to successfully identify some our IAMBinding IDs. As a result of this, I'm getting the following error:
    error: Preview failed: importing <bucket-resource-name>/roles/storage.objectCreator: Wrong number of parts to Binding id [<bucket-resource-name>/roles/storage.objectCreator]; expected 'resource_name role [condition_title]'.
    I tried so far with
    <bucket_name>
    ,
    b/<bucket_name>
    ,
    <project-id>/<bucket-name>
    , and
    <project-id>/b/<bucket-name>
    but I got the same error regardless. Any ideas?
    g
    • 2
    • 11
  • q

    quick-painter-61380

    11/29/2021, 3:22 PM
    Hi all, I'm struggling trying to get started with pulumi. I've started off by trying to import some of my existing infra (google-native) but it's failing for me. I tried to go take a look at the docs here https://www.pulumi.com/registry/packages/google-native/api-docs/https://www.pulumi.com/registry/packages/google-native/api-docs/ but when I click on Bucket I get a 404.
    t
    • 2
    • 17
  • q

    quick-painter-61380

    11/29/2021, 3:34 PM
    I was already able to set up a new bucket in my project using the template. Trying to do
    pulumi import google-native:storage/v1:Bucket  <bucket name> <bucket name>
    causes it to fail with
    Preview failed: resource '<bucket name>' does not exist
  • q

    quick-painter-61380

    11/29/2021, 3:39 PM
    I'm guessing that I should be using something besides the name for the
    ID
    but it's not clear to me what it should be. The name seemed like it would be fine since they are global unique but no dice. I also tried an ID like
    <https://www.googleapis.com/storage/v1/b/><bucket name>
    since I see something similar for the newly created bucket when I
    pulumi stack -i
    but that also doesn't work.
Powered by Linen
Title
q

quick-painter-61380

11/29/2021, 3:39 PM
I'm guessing that I should be using something besides the name for the
ID
but it's not clear to me what it should be. The name seemed like it would be fine since they are global unique but no dice. I also tried an ID like
<https://www.googleapis.com/storage/v1/b/><bucket name>
since I see something similar for the newly created bucket when I
pulumi stack -i
but that also doesn't work.
View count: 2